Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/70c90e27-68cb-3c89-abae-ef24958e93f0.roa
File:                     70c90e27-68cb-3c89-abae-ef24958e93f0.roa (raw, json)
Hash identifier:          6jyV1+0zQwEQPTgBxzlb8/UEgsIqhkyZbuWnu1p4a/k=
Subject key identifier:   1A:6A:0D:D9:01:53:BC:F9:E7:44:B0:69:D7:A2:D1:78:22:22:CA:F6
Certificate issuer:       /CN=a773147e-548c-4c30-a3fe-91c723e2cad9
Certificate serial:       010D0C9F4328584DBCD32ACA5B67273B8CD0D180
Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/70c90e27-68cb-3c89-abae-ef24958e93f0.roa
Signing time:             Tue 05 May 2026 23:19:01 +0000
ROA not before:           Tue 05 May 2026 23:19:01 +0000
ROA not after:            Mon 03 Aug 2026 23:19:01 +0000
asID:                     55256
IP address blocks:        158.95.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bc:d3:2a:ca:5b:67:27:3b:8c:d0:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9
        Validity
            Not Before: May  5 23:19:01 2026 GMT
            Not After : Aug  3 23:19:01 2026 GMT
        Subject: CN=2c6f6f7e-bfb0-4c6c-942d-d49c6b39c98e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:af:29:74:2e:8f:ad:7c:57:9d:6f:ef:a1:2c:
                    71:a6:53:ba:0b:9b:cc:98:85:fe:30:af:c6:58:6a:
                    81:6e:c1:10:01:54:ec:d9:1c:6f:9c:32:87:ff:c3:
                    90:d0:87:42:6e:9a:cd:cb:18:ba:bd:33:91:3d:d9:
                    81:1a:20:99:75:f1:f8:63:9b:17:7b:99:bd:fe:b5:
                    8a:f8:eb:e7:93:4d:4b:95:1f:f0:3b:11:c2:7c:f8:
                    10:45:a8:51:a4:c3:b7:ce:59:f8:d8:13:04:cf:27:
                    3a:4b:bc:1d:bd:fd:a9:05:1a:ee:47:e1:a5:4f:e7:
                    03:ae:c7:4c:a0:9b:43:e3:d5:e9:69:49:e8:a8:b0:
                    eb:0a:80:3e:c1:63:df:a2:f1:07:af:68:36:4e:75:
                    ff:a1:71:22:84:e0:00:15:c0:3a:25:01:1f:0c:3c:
                    9e:11:6a:e1:db:37:49:8f:79:3c:56:89:e8:2d:06:
                    9a:a3:dd:d6:5b:06:74:fa:ba:38:07:a5:54:ee:d8:
                    8a:76:e1:2d:f3:73:5e:5e:57:23:9b:0c:53:9c:d1:
                    a9:3c:d8:6e:9f:d2:20:5c:bd:bd:30:d3:39:56:57:
                    f4:8c:46:aa:36:40:63:27:14:66:44:7a:48:30:11:
                    89:85:58:a5:b4:26:be:f0:bd:73:f0:bd:74:27:74:
                    37:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:6A:0D:D9:01:53:BC:F9:E7:44:B0:69:D7:A2:D1:78:22:22:CA:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/70c90e27-68cb-3c89-abae-ef24958e93f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl

            X509v3 Authority Key Identifier:
                keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.95.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:25:65:c1:be:47:65:7a:34:40:1a:7e:a3:32:ed:59:f1:d0:
         9b:13:09:18:84:bb:67:72:71:f9:e6:85:41:84:51:9f:52:b4:
         74:5b:ff:84:ad:7a:f9:f3:30:d0:cd:0d:e0:e7:db:4c:89:7f:
         e8:ee:d4:60:ef:8d:af:02:35:b4:05:06:6c:21:01:b1:02:6a:
         c5:b4:72:55:e2:a5:ce:73:3c:94:e2:19:08:5e:1b:44:11:ca:
         61:d6:7c:78:2c:b5:e0:74:53:24:57:65:69:ce:26:98:66:1b:
         34:f9:64:f2:75:59:eb:71:8d:87:bb:0e:a9:16:2b:55:2b:a3:
         18:6a:6c:5f:f0:08:b6:3c:74:94:cc:ab:26:bb:8e:7e:12:c4:
         29:94:c8:dc:69:d3:2e:22:87:16:57:67:ca:5c:2e:be:8e:b9:
         c9:23:cb:b3:32:ea:c2:09:08:ce:f2:82:d5:f7:d4:f9:f0:13:
         8d:7c:b9:4d:c0:2e:b0:5d:30:29:7d:aa:c9:3e:5b:e6:d4:94:
         9c:f7:e7:52:c6:53:78:9e:6f:79:5c:23:6d:d9:7e:1c:0b:97:
         63:fd:3a:1e:65:88:4a:a6:cd:fd:a8:0e:c8:60:93:0b:f3:39:
         64:26:0b:13:51:e2:bd:e7:9e:5a:39:e2:51:ce:bf:1c:84:01:
         3f:f9:79:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:47:22 2026 by rpki-client